summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorSeth Mos <seth.mos@dds.nl>2011-02-06 21:03:23 +0100
committerSeth Mos <seth.mos@dds.nl>2011-02-06 21:03:23 +0100
commitb32ccfce66dbb706c0661073725f2c30a9d646a8 (patch)
treeb859c7144d8e6014e20439df5b98d665d47a451b /etc
parent3fc4a490effa9575dfc53d42739ee8fa1a4acd64 (diff)
parent998930abd0f319cd662146f8073eb5909575150a (diff)
downloadpfsense-b32ccfce66dbb706c0661073725f2c30a9d646a8.zip
pfsense-b32ccfce66dbb706c0661073725f2c30a9d646a8.tar.gz
Merge remote branch 'upstream/master'
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/filter.inc11
-rw-r--r--etc/inc/openvpn.inc4
-rwxr-xr-xetc/rc.bootup1
-rwxr-xr-xetc/rc.filter_synchronize1
-rwxr-xr-xetc/rc.newipsecdns3
5 files changed, 12 insertions, 8 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index f320531..fc3f734 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1264,11 +1264,14 @@ function filter_nat_rules_generate() {
if(is_array($config['nat']['advancedoutbound']['rule'])) {
foreach ($config['nat']['advancedoutbound']['rule'] as $obent) {
update_filter_reload_status("Creating advanced outbound rule {$obent['descr']}");
- $src = $obent['source']['network'];
- if(isset($obent['destination']['not']) && !isset($obent['destination']['any']))
- $dst = "!" . $obent['destination']['address'];
- else
+ $src = alias_expand($obent['source']['network']);
+ if(!$src)
+ $src = $obent['source']['network'];
+ $dst = alias_expand($obent['destination']['address']);
+ if(!$dst)
$dst = $obent['destination']['address'];
+ if(isset($obent['destination']['not']) && !isset($obent['destination']['any']))
+ $dst = "!" . $dst;
if(!$obent['interface'])
$natif = "wan";
else
diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc
index 496b8bc..08e5f92 100644
--- a/etc/inc/openvpn.inc
+++ b/etc/inc/openvpn.inc
@@ -228,9 +228,9 @@ function openvpn_add_dhcpopts(& $settings, & $conf) {
$conf .= "push \"dhcp-option DNS {$settings['dns_server4']}\"\n";
if (!empty($settings['ntp_server1']))
- $conf .= "push \"dhcp-option NTP {$settings['dhcp_ntp']}\"\n";
+ $conf .= "push \"dhcp-option NTP {$settings['ntp_server1']}\"\n";
if (!empty($settings['ntp_server2']))
- $conf .= "push \"dhcp-option NTP {$settings['dhcp_ntp']}\"\n";
+ $conf .= "push \"dhcp-option NTP {$settings['ntp_server2']}\"\n";
if ($settings['netbios_enable']) {
diff --git a/etc/rc.bootup b/etc/rc.bootup
index 3451c88..b6c8eab 100755
--- a/etc/rc.bootup
+++ b/etc/rc.bootup
@@ -390,6 +390,7 @@ if(file_exists('/conf/needs_package_sync')) {
clear_subsystem_dirty('packagelock');
}
}
+ @unlink('/conf/needs_package_sync');
}
/* done */
diff --git a/etc/rc.filter_synchronize b/etc/rc.filter_synchronize
index 6a282cc..086a537 100755
--- a/etc/rc.filter_synchronize
+++ b/etc/rc.filter_synchronize
@@ -66,7 +66,6 @@ function backup_vip_config_section() {
}
if($section['advbase'] <> "") {
$section_val = intval($section['advbase']);
- $section_val=$section_val+1;
if($section_val > 255)
$section_val = 255;
$section['advbase'] = $section_val;
diff --git a/etc/rc.newipsecdns b/etc/rc.newipsecdns
index 3061f16..c8fcabe 100755
--- a/etc/rc.newipsecdns
+++ b/etc/rc.newipsecdns
@@ -31,6 +31,7 @@
*/
/* parse the configuration and include all functions used below */
+ require_once("config.inc");
require_once("functions.inc");
require_once("filter.inc");
require_once("shaper.inc");
@@ -43,7 +44,7 @@
sleep(1);
}
- log_error("IPSEC: One or more IPSEC tunnel endpoints has changed IP. Refreshing.");
+ log_error("IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.");
/* We will walk the list of hostnames found in the ipsec tunnel
* configuration. Since we are already triggered by filterdns
* that a hostname has changed we can proceed to compare the
OpenPOWER on IntegriCloud